Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language toy space-login demo that reads a local config file and prints simulated results, with no network use, persistence, privilege escalation, or destructive behavior found.
Install only if you are comfortable using a Chinese-language demo skill. The documented SPACE_API_KEY appears unused by the code, so do not provide real secrets unless the skill is later changed to require them.
The natural-language content throughout the file forces a specific language/locale for all users, and there is no opt-in, alternate language option, or justification for a Chinese-only constraint. This matches the policy category for language or locale violations in natural-language instructions.
This manifest-style JSON contains multiple user-facing values in Chinese, such as the space center and emergency contact names. Because the file provides no indication that the skill is region-specific or that users can choose their language/locale, it may violate the policy against forcing a specific language without opt-in.
Suspicious Unicode normalization or mixed-script content
This Python file presents its docstring, comments, and all user-facing print output exclusively in Chinese. The policy for natural-language content requires avoiding forced language or locale constraints unless the user is given a choice or the restriction is clearly documented and justified.
Suspicious Unicode normalization or mixed-script content
This code file contains user-facing natural-language descriptions and CLI help text exclusively in Chinese, beginning with the module docstring and continuing through argument/help strings. Under the policy, forcing a specific language without user opt-in or a documented justification is a natural-language policy violation.
The runtime output shown to users via print statements and argparse help is consistently Chinese-only, including errors, status, and success messages. Because the skill does not offer a language choice or explain a justified region-specific constraint, this violates the language/locale policy.
No suspicious patterns detected.
